Credit Card Stealer Targets WordPress Payment Plug-Ins

MageCart Operators Hide Infection in Legitimate Payment Processing Software
Attackers are deploying modified MageCart malware against WordPress websites that use the WooCommerce shopping cart plug-in, says website security firm Sucuri. Hackers inject PHP and JavaScript code and hide stolen credit card numbers in .jpg files.

card code credit credit card files hackers hide infection inject javascript jpg magecart malware numbers payment php security shopping stealer stolen sucuri website websites website security woocommerce wordpress